Senior Cyber Security Engineer

The Senior Cyber Security Engineer protects the company's systems and information by designing, building, and supporting complex security solutions while driving the organization's compliance posture against applicable industry frameworks and client requirements. This role tackles ambiguous, high-impact security problems that lack predefined solutions and provides pragmatic, risk-based guidance for new technology initiatives with minimal oversight from the manager. Drawing on deep expertise across security tools, techniques, and processes, the Senior CSE monitors and responds to security alerts, manages incidents, and identifies and remediates vulnerabilities across the environment. The Senior CSE partners with technical teams and business stakeholders to focus on the highest priority risks while enabling the business to deliver client solutions securely. This position focuses on safeguarding valuable information through the establishment, enforcement, and managing of security standards. Responsibilities Work with BC employees to provide support on complex issues, address security questions, and address concerns/threats. Identify opportunities to improve processes and tasks via automation or efficiency. Perform complex scripting and script debugging for automating security tasks. Anticipate security challenges and implement preventative measures. Make critical decisions balancing risks and opportunities to impact positively the company's overall security. Flexibility to adapt and execute various additional assignments based on evolving need Additional Focus Areas Security Engineering & Architecture Design, build, and automate security solutions and tooling to detect, prevent, and manage threats across the environment. Shape the security architecture of cloud and infrastructure environments. Guide new technology initiatives with a security-first lens, providing pragmatic, risk-based recommendations that enable the business rather than block it. Build and tune SIEM ingests, use cases, and alerting to sharpen detection capabilities. Detection, Response & Access Investigate and respond to alerts, incidents, and vulnerabilities, turning insight into action using established tools and playbooks. Champion zero-trust and least-privilege access through regular access reviews. Compliance & Risk Drive compliance and control maturity against applicable industry frameworks and contractual security requirements (e.g., SOC2, CMMC), including control implementation, audit preparation, and remediation tracking. Assess risk across supplier and third-party relationships, and support Legal with eDiscovery and preservation requests as needed. Collaboration & Mentorship Partner closely with technical and business teams to deliver secure, high-quality capabilities, prioritizing the risks that matter most. Keep a pulse on emerging threats and technologies and help shape how the team responds to them. Provide mentorship, guidance, and knowledge-sharing to help less experienced team members develop their skills and grow within their roles. Skills and Competencies Strong comprehension and demonstratable skills in information and data security principles and practices. Data-driven decision-making ability, with strong analytical and problem-solving skills. Excellent communication skills to effectively provide relevant technical guidance to a broad set of stakeholders and mentor employees. Proven skills in application security, software development security, authentication security, SEIM, automation, incident management, vulnerability management, compliance, and security solution implementation. Strong Microsoft/Azure security skills, including automation. Experience Typically, a minimum of 8 years of relevant cyber security experience. Experience with incident and vulnerability management and security guidance. Preferred Experience Relevant governance/compliance certifications (e.g., CISSP, CISA, CRISC, CGRC) preferred. 6+ years of direct cyber security experience, including hands-on compliance or audit-support work. Working knowledge across many of the following domains, with deeper hands-on expertise in at least three or four: identity & access management; communications & network; asset; operations; software development; application; SIEM and detection engineering; automation/scripting; and assessment/compliance/audit support. Working knowledge of AI-specific security considerations (e.g., securing AI/ML systems and evaluating AI-assisted tools for security use), and comfort using AI tools to improve security operations. Education A relevant degree in computer science, cybersecurity, information systems, or related field or equivalent experience is required. Relevant certifications (CISSP, Security+, etc). Learn more about our work: Climate Change and Resilience - Brown and Caldwell Data Center Water - Brown and Caldwell Emerging Contaminants and PFAS - Brown and Caldwell Digital Solutions - Brown and Caldwell News - Brown and Caldwell Projects - Brown and Caldwell Industrial Water - Brown and Caldwell Salary Range: The anticipated starting pay range for this position is based on the employee’s primary work location and may be more or less depending upon skills, experience, and education. These ranges may be modified in the future. Location A: $129,000 - $177,000 Location B: $142,000 - $194,000 Location C: $155,000 - $212,000 You can view which BC location applies to you here. If you have any questions, please speak with your Recruiter. Benefits and Other Compensation: We provide a comprehensive benefits package that promotes employee health, performance, and success which includes medical, dental, vision, short and long-term disability, life insurance, an employee assistance program, paid time off and parental leave, paid holidays, 401(k) retirement savings plan with employer match, performance-based bonus eligibility, employee referral bonuses, tuition reimbursement, pet insurance and long-term care insurance. Click here to see our full list of benefits. About Brown and Caldwell Headquartered in Walnut Creek, California, Brown and Caldwell is a full-service environmental engineering and construction services firm with 50 offices and over 2,100 professionals across North America and the Pacific. For more than 75 years, we have created leading-edge environmental solutions for municipalities, private industry, and government agencies. We strive to be the company of choice—to our clients, who benefit from our passion for delivering exceptional quality, and to our employees, present and future, who share our commitment to client service, collaboration, and innovation. Join us, and you will find a home where you can do your best work, reach new levels of expertise, and enjoy exceptional development opportunities. For more information, visit This position is subject to a pre-employment background check and a pre-employment drug test. Notice to Third Party Agencies: Brown and Caldwell does not accept unsolicited resumes from recruiters or employment agencies. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement and approved engagement request with Brown and Caldwell, Brown and Caldwell reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Brown and Caldwell is proud to be an EEO/AAP Employer. Brown and Caldwell encourages protected veterans, individuals with disabilities, and applicants from all backgrounds to apply. Brown and Caldwell ensures nondiscrimination in all programs and activities in accordance with Title VI of the Civil Rights Act. Job Summary Requisition Number: SENIO006990 Job Category: Digital Services Schedule: Full-Time